Virtual voice builder

Wires a real microphone through an AI brain (STT → LLM → TTS) and routes the output to a virtual audio cable so apps like Google Meet hear the processed voic...

This skill appears to implement the described mic → AI → virtual-cable pipeline, but review these before installing: 1) Inspect and confirm required environment variables: ensure TTS_VOICE_ID is provided (code expects it) and update your .env only if you accept storing keys in a file. 2) The LLM env-check in scripts/04_llm_stream.js contains a bug that bypasses LLM_API_KEY validation; either fix that check or be prepared for runtime errors. 3) The SKILL.md was flagged for a 'system-prompt-override' pattern — read the file yourself and ensure it doesn't include instructions that would alter agent/system prompts or perform unexpected actions. 4) Run the scripts in a controlled environment first (not as root), test each stage independently (device listing, capture, STT, LLM stream, TTS), and avoid granting more privileges than necessary. 5) If you will use real API keys, consider using short-lived keys or scoped accounts and remove keys from .env after testing; monitor outbound connections (Deepgram, your LLM provider, and TTS provider endpoints) to confirm they match expectations. If any of these inconsistencies concern you or you don't want to store API keys in a project file, treat this skill as potentially risky until corrected.

Type: OpenClaw Skill Name: virtual-voice-ai Version: 1.0.0 The skill bundle provides a legitimate framework for building a real-time AI voice pipeline (STT → LLM → TTS) routed through virtual audio devices for use in applications like Google Meet. It utilizes ffmpeg for audio capture, resampling, and playback, and integrates with standard AI service providers (Deepgram, OpenAI, ElevenLabs). While the code utilizes powerful system capabilities such as audio device access and child process execution, the implementation is transparent, well-documented, and lacks any indicators of malicious intent, data exfiltration, or unauthorized persistence. A minor bug exists where 'scripts/02_capture_resample.js' is required by other scripts but is missing from the bundle, which is classified as a functional flaw rather than a security risk.